Santander site - malicious code?

polymaff

This isn't a specifically Santander issue. All of the banks seem to allow third parties to participate in what should be a minimal environment.

And they all deny that they do it.

TrustyOven

NoScript reports:

http://www.santander.co.uk/uk/savings/esaver

wants to execute scripts from doubleclick.

This is why I love NoScript.

Why should we run 3rd party scripts on behalf of a site?
Remember, those scripts are running in your browser, on your computer. Someone else's scripts. Not directly related to the site you are browsing to. On your computer. Many scare, such annoy, so Doge. Wow!

spenderdave

These adlinks have been used by Santander for years. When I have encountered them in the past my hosts file (MVPSHosts, now UBlock) blocked them and I had to disable my ad filter to proceed. Customer services are probably indeed unaware of them. Maybe innocent but going from a logged in secure page to one which is not is not what banks should be doing. Complain strongly once you find somebody who understands the problem.

rbs_gb

Found this thread because today I wanted to open a new Santander account and noticed the links to doubleclick.net. I called Santander and got the same response as others have posted previously "not our fault". I'm using Firefox, Win 10 and so I tried using Chrome, and sure enough, no redirects to doubleclick.net. The links are the ones that Santander tell me should be there. I checked again, using Microsoft Edge, and again, no redirects. So now I was pretty certain the problem was Firefox.



I cleaned all the cache, cookies etc without any solution. So I then created a new profile (kind of like doing a fresh install of Firefox) and hey presto, the problem goes away. I only have two "add-ons" in Firefox, one of which is uBlock (an adware filter). So I went back to my original profile, and tried disabling the add-ons, and that fixed it too....... So now I was making progress. I then left uBlock enabled, and the redirect came back. Turn off uBlock, and the problem stopped.



My conclusion is that uBlock origin has a corrupted list somewhere, and if you disable it for the Santander site, then none of the redirects happen. I've removed uBlock totally for the moment, as I suspect that if it has infected the Santander site, it might do the same with others too.


Hope that helps

[Deleted User]

It’s just an ad-tracking redirect.

Nowhere near as bad or “malicious” as people are making it out to be

rbs_gb

errrr, no. If today it redirects to a google ad tracker, which Santander say they do not use, and it has come from a corrupted ad filter list, who is to say tomorrow the corrupted ad filter list won´t send you to a false copy of the santander web site?

[Deleted User]

Oh dear... :T

That’s not how it works.

It’s tracking clicks that’s all. The redirect will always end up at the required destination.

Santander “support” don’t know what they are talking about

rbs_gb

OK, Explain just one thing: Disable uBlock and there is no redirect. Enable uBlock and the redirect happens. Why?